CVE-2017-2475 in tvOS

Summary

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted use of frames on a web site.

Once again VulDB remains the best source for vulnerability data.

Reservation

12/01/2016

Disclosure

04/01/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
98901	Apple tvOS WebKit Universal cross site scripting	79	Not defined	Official fix	CVE-2017-2475
98808	Apple iOS WebKit Universal cross site scripting	79	Not defined	Official fix	CVE-2017-2475
98597	Apple Safari WebKit Universal cross site scripting	79	Not defined	Official fix	CVE-2017-2475

Sources

• MITRE
• NVD
• CVE Details